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ABSTRACT OF THE DISCLOSURE 

A method and apparatuses are disclosed for handling digital data packets at a logical 
borderline that separates an untrusted packet-switched information network from a 
protected domain. A packet processor part intercepts a packet that is in transit 
between the untrusted packet-switched information network and the protected 
domain. The packet is examined at the packet processor part in order to determine, 
whether the packet contains digital data that pertains to a certain protocol. If the 
packet is not found to contain such digital data, it is processed at the packet 
processor part. If the packet is found to contain digital data that pertains to said 
certain protocol, it gets redirected to an application gateway part that processes the 
packet according to a set of processing rules based on obedience to said certain 
protocol. The packet processor part is a kernel mode process running in a computer 
device and the application gateway part is a user mode process running in a 
computer device. 
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